Datto RMM: How do I monitor Windows backups?

Question

Environment

Answer

Microsoft Windows-based operating systems have built-in backup tools which you can configure to take automatic backups. You can monitor these backups by using Datto RMM's event log monitoring.

As part of an audit, Datto RMM Agents collect data about event logs and their sources. When selecting a drop-down menu in the Event Log Monitor wizard on an endpoint, an index of events and their sources will appear as you enter text in the input field.

Event Source names will vary by platform. The following examples will help you understand how to configure your event log monitor:

Windows XP and Server 2003: Add the Event Log Name as Application and the Event Source Name as NTBackup.

Windows workstations(Windows Vista and above): Add the Event Log Name as Application and the Event Source Name as Windows Backup.

Windows Servers (2008 and above): Add the Event Log Name as Application and the Event Source Name as Microsoft-Windows-Backup.

Complete the monitor setup with your selected criteria in one or more of the Event Code, Event Type, or Event Description fields, and finish the wizard.

For information on creating monitoring policies as well as a link to download best practice monitoring policies, review our Create a Monitoring Policy article.